From 403d0616640f58a615d2f67f856dae23253b09a4 Mon Sep 17 00:00:00 2001 From: Andrew Stoltz Date: Thu, 16 Apr 2026 15:54:39 -0500 Subject: [PATCH] fix(asterisk): hostAlias downloads.asterisk.org so sounds actually download CoreDNS wildcard for iamworkin.lan catches unresolved names and returns the Traefik VIP (10.0.56.200), so downloads.asterisk.org from inside a pod returns 404 from Traefik rather than the real Sangoma mirror. Pin the real IP (165.22.184.19 = oss-downloads.sangoma.com) via hostAliases so curl reaches the actual server. Co-Authored-By: Claude Opus 4.7 (1M context) --- apps/asterisk/deployment.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/apps/asterisk/deployment.yaml b/apps/asterisk/deployment.yaml index e50b24b..2598f57 100644 --- a/apps/asterisk/deployment.yaml +++ b/apps/asterisk/deployment.yaml @@ -23,6 +23,15 @@ spec: dnsPolicy: ClusterFirstWithHostNet securityContext: fsGroup: 0 + # CoreDNS in this cluster has an iamworkin.lan wildcard that catches + # any unresolved name and returns 10.0.56.200 (Traefik VIP), which + # means downloads.asterisk.org inside the pod resolves to Traefik and + # returns 404. Pin the real address so the init container can fetch + # the sounds tarball. + hostAliases: + - ip: 165.22.184.19 + hostnames: + - downloads.asterisk.org initContainers: - name: install-sounds # Downloads Asterisk core sounds (en, ulaw) into the sounds emptyDir